This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff/4c649115-742b-32bc-aa17-aa4f55ec3133.roa File: 4c649115-742b-32bc-aa17-aa4f55ec3133.roa (raw, json) Hash identifier: 3vfkHO9o79wXgoEJJp9sJIio8ajL2s3q/gANT51+dag= Subject key identifier: 68:4B:60:63:EC:36:8B:4B:D7:57:7A:17:5E:86:C2:10:2E:AB:89:9A Certificate issuer: /CN=28035ea2-c1d5-4b29-a8c4-1b31379c8aff Certificate serial: 010D0C9F4328584C6192A570A8F44FAF02291640 Authority key identifier: F1:AF:E0:C6:3F:41:DB:75:5C:B2:1E:FD:F1:D1:F8:F7:D0:A9:FB:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff/4c649115-742b-32bc-aa17-aa4f55ec3133.roa Signing time: Thu 01 Jan 2026 14:00:38 +0000 ROA not before: Thu 01 Jan 2026 14:00:38 +0000 ROA not after: Wed 01 Apr 2026 13:00:38 +0000 asID: 22641 IP address blocks: 216.169.210.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff/28035ea2-c1d5-4b29-a8c4-1b31379c8aff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff/28035ea2-c1d5-4b29-a8c4-1b31379c8aff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Jan 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:61:92:a5:70:a8:f4:4f:af:02:29:16:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28035ea2-c1d5-4b29-a8c4-1b31379c8aff Validity Not Before: Jan 1 14:00:38 2026 GMT Not After : Apr 1 13:00:38 2026 GMT Subject: CN=58622a02-f133-4d03-81dd-a11c19d828cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:b3:0c:f0:f7:f5:b7:50:c2:8d:16:03:39:6c: fa:7d:17:8d:71:4e:1a:5a:36:d5:e1:3d:75:fc:c5: 7e:7f:1d:7a:b8:36:6f:31:cb:aa:59:37:0e:80:9b: d2:09:de:bf:a6:16:55:e6:fc:35:af:fe:0a:37:1c: 87:9b:bf:96:7f:c7:e3:24:50:dd:c8:e8:19:bb:b0: 3c:a5:d3:48:09:8b:3c:c4:39:a8:7c:11:5d:6b:5b: c4:43:4d:87:1f:22:f4:fa:c8:6a:fe:03:e6:9e:66: 55:3d:ae:30:c0:52:07:c6:bb:57:40:f6:02:28:27: d6:bd:82:c3:5c:c1:b2:cf:f5:28:c1:bc:77:66:3c: 40:17:25:aa:e3:4c:e0:f9:05:d3:6f:dc:d3:dc:43: 03:3e:d2:16:0f:66:d5:05:4b:d3:d8:74:7d:9a:fe: 3b:5f:85:df:17:b4:c7:e4:e6:9d:44:ec:e5:6b:87: 88:65:02:5a:99:03:24:88:c9:c4:b7:d0:e6:9e:23: 3e:2e:fd:d5:f3:13:8a:46:e0:e4:f7:2d:fa:d9:cf: f8:81:51:eb:88:76:a7:2f:9b:bc:da:43:f3:3c:53: 3c:db:ef:a9:ed:85:81:b4:fc:4b:36:b9:b3:ed:cd: 5e:d7:1d:3a:2b:01:97:73:6e:05:1f:d0:74:5a:bc: bf:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:4B:60:63:EC:36:8B:4B:D7:57:7A:17:5E:86:C2:10:2E:AB:89:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff/4c649115-742b-32bc-aa17-aa4f55ec3133.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff/28035ea2-c1d5-4b29-a8c4-1b31379c8aff.crl X509v3 Authority Key Identifier: keyid:F1:AF:E0:C6:3F:41:DB:75:5C:B2:1E:FD:F1:D1:F8:F7:D0:A9:FB:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff.cer sbgp-ipAddrBlock: critical IPv4: 216.169.210.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:09:af:15:88:a7:12:e5:6b:a1:05:34:67:80:33:a5:dc:37: c8:a4:d6:ef:d0:00:b9:bf:dc:94:e1:f2:29:96:92:3c:6e:bb: a6:a8:32:ab:8f:4c:be:6f:6c:a7:70:7e:03:b2:9c:b0:63:a8: d0:27:6c:07:10:ae:c2:fd:e0:d1:9e:67:96:f9:d3:9c:41:90: 5f:f4:c5:97:a0:27:ca:d9:83:48:40:3d:fb:1b:b5:05:b8:55: b0:f6:7e:80:75:ec:64:37:f3:90:5c:68:0c:94:d9:20:2f:7c: 43:1a:b1:1d:f8:c3:8c:ba:89:2b:c6:c6:a2:8c:94:6e:06:8c: 0c:83:1e:c0:ea:8b:53:c1:68:b2:ac:f7:17:c2:78:75:f9:12: 69:d8:09:56:05:c0:49:9e:6f:ac:a1:ee:7f:70:13:64:42:2f: 8f:82:bd:7c:04:3d:ba:8d:7c:71:eb:c4:2b:1c:a9:f3:35:ce: ab:04:a1:8d:05:8c:22:5f:ca:ce:44:38:b6:1a:76:4f:cd:77: ba:71:79:f6:88:5f:f2:52:91:d3:ad:bd:54:4b:d0:c5:8f:4f: ff:7c:f0:a0:55:8a:a5:67:e3:71:09:02:d7:38:33:63:e1:3f: 9a:5c:22:28:97:48:b1:90:f2:8b:33:da:81:9c:0f:f1:b3:d9: 5e:c5:32:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExhkqVwqPRPrwIpFkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgwMzVlYTItYzFkNS00YjI5LWE4YzQtMWIzMTM3OWM4 YWZmMB4XDTI2MDEwMTE0MDAzOFoXDTI2MDQwMTEzMDAzOFowLzEtMCsGA1UEAxMk NTg2MjJhMDItZjEzMy00ZDAzLTgxZGQtYTExYzE5ZDgyOGNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4LMM8Pf1t1DCjRYDOWz6fReNcU4aWjbV4T11 /MV+fx16uDZvMcuqWTcOgJvSCd6/phZV5vw1r/4KNxyHm7+Wf8fjJFDdyOgZu7A8 pdNICYs8xDmofBFda1vEQ02HHyL0+shq/gPmnmZVPa4wwFIHxrtXQPYCKCfWvYLD XMGyz/Uowbx3ZjxAFyWq40zg+QXTb9zT3EMDPtIWD2bVBUvT2HR9mv47X4XfF7TH 5OadROzla4eIZQJamQMkiMnEt9DmniM+Lv3V8xOKRuDk9y362c/4gVHriHanL5u8 2kPzPFM82++p7YWBtPxLNrmz7c1e1x06KwGXc24FH9B0Wry/vwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGhLYGPsNotL11d6F16GwhAuq4maMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8yODAz NWVhMi1jMWQ1LTRiMjktYThjNC0xYjMxMzc5YzhhZmYvNGM2NDkxMTUtNzQyYi0z MmJjLWFhMTctYWE0ZjU1ZWMzMTMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMjgwMzVlYTItYzFkNS00YjI5LWE4 YzQtMWIzMTM3OWM4YWZmLzI4MDM1ZWEyLWMxZDUtNGIyOS1hOGM0LTFiMzEzNzlj OGFmZi5jcmwwHwYDVR0jBBgwFoAU8a/gxj9B23Vcsh798dH499Cp++AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8yODAzNWVhMi1jMWQ1LTRiMjktYThjNC0xYjMx Mzc5YzhhZmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2KnSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEcJrxWIpxLla6EFNGeAM6XcN8ik1u/QALm/3JTh8imWkjxuu6aoMquP TL5vbKdwfgOynLBjqNAnbAcQrsL94NGeZ5b505xBkF/0xZegJ8rZg0hAPfsbtQW4 VbD2foB17GQ385BcaAyU2SAvfEMasR34w4y6iSvGxqKMlG4GjAyDHsDqi1PBaLKs 9xfCeHX5EmnYCVYFwEmeb6yh7n9wE2RCL4+CvXwEPbqNfHHrxCscqfM1zqsEoY0F jCJfys5EOLYadk/Nd7pxefaIX/JSkdOtvVRL0MWPT/988KBViqVn43EJAtc4M2Ph P5pcIiiXSLGQ8osz2oGcD/Gz2V7FMmc= -----END CERTIFICATE-----Generated at Sat Jan 10 14:26:44 2026 by rpki-client